ESPN hacked -- got info? (fwd)

---------- Forwarded message ----------
Date: Thu, 17 Jul 1997 17:56:29 -0700 (PDT)
From: Declan McCullagh <declan@well.com>
To: fight-censorship@vorlon.mit.edu
Subject: ESPN hacked -- got info?

[From a friend. Any responses? --Declan]


---------- Forwarded message ----------

Declan --

Do you have any information about the ESPN/SportZone web site store being 
hacked?  Or a contact?  The pro-crypto folks on the Hill are quite 
interested to know if 1) this site was using encryption before being hacked 
and 2) what type of encryption they are using now (one of the press stories 
noted that crypto was one of the security measures implemented after the 
hacking).

I realize this was probably an inside job, but it's good fodder for the 
Hill.  Any insight you might have -- or other examples -- would be great.

Thanks in advance.

Strong crypto is useful not in building a web site, but in
providing an infrastructure that resists stupidity better.

	For example, when you telnet or ftp, your password goes in a
sniffable cleartext format.  When you send mail, it traverses the net
in the clear, and is stored in the clear.  If crypto was widely
deployed, the sensitive information people send in the clear would be
protected.

	Locking the barn after the horses are gone is not nearly as
useful as ubiquitous locks.

Adam


Declan McCullagh wrote:
| ---------- Forwarded message ----------
| 
| Declan --
| 
| Do you have any information about the ESPN/SportZone web site store being 
| hacked?  Or a contact?  The pro-crypto folks on the Hill are quite 
| interested to know if 1) this site was using encryption before being hacked 
| and 2) what type of encryption they are using now (one of the press stories 
| noted that crypto was one of the security measures implemented after the 
| hacking).
| 
| I realize this was probably an inside job, but it's good fodder for the 
| Hill.  Any insight you might have -- or other examples -- would be great.
| 
| Thanks in advance.
| 
| 


-- 
He has erected a multitude of new offices, and sent hither swarms of
officers to harrass our people, and eat out their substance.

On Thu, 17 Jul 1997, Adam Shostack wrote:

> 	Strong crypto is useful not in building a web site,

It is when your transfuring large amounts of money via it.  The secuarty
should cost more to break to brack then you can make from braking it.

Please excuse my spelling as I suffer from agraphia see the url in my header. 
Never trust a country with more peaple then sheep.  ex-net.scum and proud
You Say To People "Throw Off Your Chains" And They Make New Chains For
Themselves? --Terry Pratchett